search

ryoluo / sail-ssl

Laravel Sail plugin to enable SSL (HTTPS) connection with Nginx.
MIT License
159 stars 15 forks source link

Your connection is not private #2

Closed abr4xas closed 2 years ago

abr4xas commented 2 years ago

Any advice on how to make it work ?

image

ryoluo commented 2 years ago

You just need to click "Advanced" then "Continue to localhost (unsafe)" to access your application. *The warning from the browser is normal behavior because the server uses a self-signed certificate.

aguvillalba commented 2 years ago

@ryoluo the issue is not about that the browser detects that the certificate is self-signed, the problem is that once you click "Advanced", the problem with Chrome (or Chrome based browsers like Brave) is that the message is the following:

" normally uses encryption to protect your information. When Chrome tried to connect to this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Chrome stopped the connection before any data was exchanged.

You cannot visit at the moment because the website sent scrambled credentials that Chrome cannot process. Network errors and attacks are usually temporary, so this page will probably work later."

You see the "because the website sent scrambled credentials that Chrome cannot process" that's the real issue.

ryoluo commented 2 years ago

@aguvillalba I got it. Actually this is not a library's issue, but you can ignore the caution by typing "thisisunsafe" on the page. Ref: https://snippets.khromov.se/bypass-chrome-self-signed-certificate-not-working-error-page/

maurocasas commented 2 years ago

When you get to this screen, you may type thisisunsafe in the "air", and it'll overpass this.

Meaning, on this page, you don't click anything, just type that and it'll continue.

mreduar commented 1 year ago

Isn't the purpose of having SSL is that the local certificate is valid? For example, in Laragon the certificate .crt is added to TrustStore.

ryoluo commented 1 year ago

Validation of self-signed certificate is out of scope because it is the issue of the SSL client, not the server.

GingerN commented 2 months ago

Very convenient plugin. Thank you.

For this question I want to advice this answer by kellen for google chrome https://stackoverflow.com/questions/7580508/getting-chrome-to-accept-self-signed-localhost-certificate